Vulnerabilities > XEN > XEN > 4.1.0
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2012-12-13 | CVE-2012-5514 | Local Denial of Service vulnerability in Xen The guest_physmap_mark_populate_on_demand function in Xen 4.2 and earlier does not properly unlock the subject GFNs when checking if they are in use, which allows local guest HVM administrators to cause a denial of service (hang) via unspecified vectors. local xen | 4.7 |
| 2012-12-13 | CVE-2012-5511 | Improper Restriction of Operations Within the Bounds of A Memory Buffer vulnerability in XEN Stack-based buffer overflow in the dirty video RAM tracking functionality in Xen 3.4 through 4.1 allows local HVM guest OS administrators to cause a denial of service (crash) via a large bitmap image. | 4.7 |
| 2012-12-13 | CVE-2012-5510 | Local Denial of Service vulnerability in Xen Grant Table Xen 4.x, when downgrading the grant table version, does not properly remove the status page from the tracking list when freeing the page, which allows local guest OS administrators to cause a denial of service (hypervisor crash) via unspecified vectors. local xen | 4.7 |
| 2012-12-13 | CVE-2011-3131 | Resource Management Errors vulnerability in XEN Xen 4.1.1 and earlier allows local guest OS kernels with control of a PCI[E] device to cause a denial of service (CPU consumption and host hang) via many crafted DMA requests that are denied by the IOMMU, which triggers a livelock. | 4.6 |
| 2012-12-03 | CVE-2012-3432 | Permissions, Privileges, and Access Controls vulnerability in XEN The handle_mmio function in arch/x86/hvm/io.c in the MMIO operations emulator for Xen 3.3 and 4.x, when running an HVM guest, does not properly reset certain state information between emulation cycles, which allows local guest OS users to cause a denial of service (guest OS crash) via unspecified operations on MMIO regions. | 1.9 |
| 2012-12-03 | CVE-2012-2934 | Local Denial of Service vulnerability in Xen 64-bit PV Guests Xen 4.0, and 4.1, when running a 64-bit PV guest on "older" AMD CPUs, does not properly protect against a certain AMD processor bug, which allows local guest OS users to cause a denial of service (host hang) via sequential execution of instructions across a non-canonical boundary, a different vulnerability than CVE-2012-0217. local xen | 1.9 |
| 2012-12-03 | CVE-2012-0218 | Unspecified vulnerability in XEN 3.4.0/4.0.0/4.1.0 Xen 3.4, 4.0, and 4.1, when the guest OS has not registered a handler for a syscall or sysenter instruction, does not properly clear a flag for exception injection when injecting a General Protection Fault, which allows local PV guest OS users to cause a denial of service (guest crash) by later triggering an exception that would normally be handled within Xen. local xen | 1.9 |
| 2012-11-24 | CVE-2012-4538 | Improper Input Validation vulnerability in XEN 4.0.0/4.1.0/4.2.0 The HVMOP_pagetable_dying hypercall in Xen 4.0, 4.1, and 4.2 does not properly check the pagetable state when running on shadow pagetables, which allows a local HVM guest OS to cause a denial of service (hypervisor crash) via unspecified vectors. | 4.9 |
| 2012-11-24 | CVE-2012-3433 | Resource Management Errors vulnerability in XEN 4.0.0/4.1.0 Xen 4.0 and 4.1 allows local HVM guest OS kernels to cause a denial of service (domain 0 VCPU hang and kernel panic) by modifying the physical address space in a way that triggers excessive shared page search time during the p2m teardown. | 4.9 |
| 2012-11-23 | CVE-2012-6036 | Permissions, Privileges, and Access Controls vulnerability in XEN 4.0.0/4.1.0/4.2.0 The (1) memc_save_get_next_page, (2) tmemc_restore_put_page and (3) tmemc_restore_flush_page functions in the Transcendent Memory (TMEM) in Xen 4.0, 4.1, and 4.2 do not check for negative id pools, which allows local guest OS users to cause a denial of service (memory corruption and host crash) or possibly execute arbitrary code via unspecified vectors. | 4.4 |